December 2019 - openSUSE Security Announce

[security-announce] openSUSE-SU-2019:2664-1: important: Security update for opera
by opensuse-security＠opensuse.org 10 Dec '19

10 Dec '19

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2664-1 Rating: important References: Cross-References: CVE-2019-13720 CVE-2019-13721 Affected Products: openSUSE Leap 15.1:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: Opera was updated to version 65.0.3467.62 - CHR-7658 Update chromium on desktop-stable-78-3467 to 78.0.3904.108 - DNA-81387 Remove support for old bundle structure in signing scripts - DNA-81675 Update widevine signature localisation in signed packages - DNA-81884 [Advanced content blocking] Ads are blocked for whitelisted page in Incognito - DNA-82230 [Mac] URL is not correctly aligned when the Geolocation is ON - DNA-82368 Generating diffs for unsinged packages doesn’t work - DNA-82414 Wrong number of trackers displayed just after deactivating adblocker - DNA-82470 [Linux] Snap package doesn’t recognise GNOME 3.24 platform snap connection - DNA-82473 https://www.nba.com/standings not working with AdBlocker enabled - DNA-82484 Update content blocking icon - DNA-82485 [Mac 10.15] Opera installer error at the end of installation process - DNA-82508 [Adblocker] Predefault lists can not be unchecked - DNA-82557 Address bar dropdown launches HTTP GETs for every autocomplete - DNA-82596 Do not block first-party ‘trackers’ - DNA-82616 Settings – Tracker Blocker – Add “Learn more” link - DNA-82626 [Win] High CPU usage due to media indicator animation - DNA-82647 Tab icons mixed after Tab closing - DNA-82742 Pages won’t load after closing private mode - DNA-82768 Mark also the reference group in “exp” header for DNA-81658 - DNA-82840 Disable favicon fetching for typed URLs Complete Opera 65.0 changelog at: https://blogs.opera.com/desktop/changelog-for-65/ Update to version 64.0.3417.92 - DNA-81358 Wrong key color on extension popup in dark mode - DNA-82208 Cherry-pick CVE-2019-13721 and CVE-2019-13720 Update to version 64.0.3417.83 - DNA-79676 Use FFmpegDemuxer to demux ADTS - DNA-81010 Spinner takes a lot of cpu - DNA-81385 Keys on some popups in dark mode can’t be hovered - DNA-81494 [Mac] Snap onboarding doesn’t appear while the icon still flashes - DNA-82003 Restore legacy path for AudioFileReader - DNA-82019 Enable #ffmpeg-demuxer-everywhere by default in developer - DNA-82028 Enable #ffmpeg-demuxer-everywhere by default in stable on macOS Update to version 64.0.3417.73 - CHR-7598 Update chromium on desktop-stable-77-3417 to 77.0.3865.120 - DNA-80049 The upper border of “Add to bookmarks bar” popup is cut off in white mode - DNA-80395 Menu popup borders in Settings are invisible in Dark mode - DNA-81263 Change the continue section buttons visibility as in description - DNA-81304 Crash at chrome::NewTab(Browser*) - DNA-81650 Easy Setup Style looks weird - DNA-81708 Missing dependency on //chrome/common:buildflags - DNA-81732 [Mac][Catalina] Cannot maximize a window after it’s been minimized - DNA-81737 Renderer crash on https://codesandbox.io/s/vanilla-ts - DNA-81753 Pinned tab only remembered after next restart - DNA-81769 Investigate reports about slow speed dial loading in O64 blog comments - DNA-81859 [Mac 10.15] Crash whenever navigating to any page - DNA-81893 Get Personalised news on SpeedDials broken layout Update to version 64.0.3417.61 - DNA-80760 Sidebar Messenger icon update - DNA-81165 Remove sharing service - DNA-81211 [Advanced content blocking] Can not turn off ad blocking in private mode - DNA-81323 content_filter::RendererConfigProvider destroyed on wrong sequence - DNA-81487 [VPN disclaimer][da, ta] Text should be multiline - DNA-81545 opr-session entry for Google ads not working - DNA-81580 Speed dials’ colours change after Opera update - DNA-81597 [Adblocker] Google Ads link hides if clicking - DNA-81639 Widevine verification status is PLATFORM_TAMPERED - DNA-81237 [Advanced content blocking] noCoinis not enabled by default - DNA-81375 Adblocking_AddToWhitelist_Popup and Adblocking_RemoveFromWhitelist_Popup metric not recorded in stats - DNA-81413 Error in console when Start Page connects to My Flow - DNA-81435 Adjust VPN disclaimer to longer strings [de] Update to version 64.0.3417.47 - DNA-80531 [Reborn3] Unify Switches - DNA-80738 “How to protect my privacy” link - DNA-81162 Enable #advanced-content-blocking on developer stream - DNA-81202 Privacy Protection popup doesn’t resize after enabling blockers - DNA-81230 [Mac] Drop support for 10.10 - DNA-81280 Adjust button width to the shorter string - DNA-81295 Opera 64 translations - DNA-81346 Enable #advanced-content-blocking on all streams - DNA-81434 Turn on #new-vpn-flow in all streams - DNA-81436 Import translations from Chromium to O64 - DNA-81460 Promote O64 to stable - DNA-81461 Snap onboarding is cut - DNA-81467 Integrate missing translations (Chinese, MS and TL) to O64/65 - DNA-81489 Start page goes into infinite loop Complete Opera 64.0 changelog at: https://blogs.opera.com/desktop/changelog-for-64/ Update to version 63.0.3368.94 - CHR-7516 Update chromium on master to 78.0.3887.7 - DNA-80966 [Linux] Integrate a new key into our packages Update to version 63.0.3368.88 - DNA-79103 Saving link to bookmarks saves it to Other bookmarks folder - DNA-79455 Crash at views::MenuController:: FindNextSelectableMenuItem(views::MenuItemView*, int, views:: MenuController::SelectionIncrementDirectionType, bool) - DNA-79579 Continuous packages using new_mac_bundle_structure do not run - DNA-79611 Update opauto_paths.py:GetResourcesDir - DNA-79621 Add support for new bundle structure to old autoupdate clients - DNA-79906 Fix package build - DNA-80131 Sign Opera Helper(GPU).app - DNA-80191 Fix opera_components/tracking_data/tracking_data_paths.cc - DNA-80638 Cherry-pick fix for CreditCardTest. UpdateFromImportedCard_ExpiredVerifiedCardUpdatedWithSameName - DNA-80801 Very slow tab deletion process Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1:NonFree: zypper in -t patch openSUSE-2019-2664=1 Package List: - openSUSE Leap 15.1:NonFree (x86_64): opera-65.0.3467.62-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-13720.html https://www.suse.com/security/cve/CVE-2019-13721.html -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2654-1: moderate: Security update for calamares
by opensuse-security＠opensuse.org 09 Dec '19

09 Dec '19

openSUSE Security Update: Security update for calamares ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2654-1 Rating: moderate References: #1140256 #1152377 Cross-References: CVE-2019-13178 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for calamares fixes the following issues: - Launch with "pkexec calamares" in openSUSE Tumbleweed, but launch with "xdg-su -c calamares" in openSUSE Leap 15. Update to Calamares 3.2.15: - "displaymanager" module now treats "sysconfig" as a regular entry in the "displaymanagers" list, and the "sysconfigSetup" key is used as a shorthand to force only that entry in the list. - "machineid" module has been re-written in C++ and extended with a new configuration key to generate urandom pool data. - "unpackfs" now supports a special "sourcefs" value of file for copying single files (optionally with renaming) or directory trees to the target system. - "unpackfs" now support an "exclude" and "excludeFile" setting for excluding particular files or patters from unpacking. Update to Calamares 3.2.14: - "locale" module no longer recognizes the legacy GeoIP configuration. This has been deprecated since Calamares 3.2.8 and is now removed. - "packagechooser" module can now be custom-labeled in the overall progress (left-hand column). - "displaymanager" module now recognizes KDE Plasma 5.17. - "displaymanager" module now can handle Wayland sessions and can detect sessions from their .desktop files. - "unpackfs" now has special handling for sourcefs setting “file”. Update to Calamares 3.2.13. More about upstream changes: https://calamares.io/calamares-3.2.13-is-out/ and https://calamares.io/calamares-3.2.12-is-out/ Update to Calamares 3.2.11: - Fix race condition in modules/luksbootkeyfile/main.py (boo#1140256, CVE-2019-13178) - more about upstream changes in 3.2 versions can be found in https://calamares.io/ and https://github.com/calamares/calamares/releases This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2654=1 Package List: - openSUSE Backports SLE-15 (noarch): calamares-branding-upstream-3.2.15-bp150.2.6.1 - openSUSE Backports SLE-15 (x86_64): calamares-3.2.15-bp150.2.6.1 calamares-webview-3.2.15-bp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-13178.html https://bugzilla.suse.com/1140256 https://bugzilla.suse.com/1152377 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2655-1: moderate: Security update for calamares
by opensuse-security＠opensuse.org 09 Dec '19

09 Dec '19

openSUSE Security Update: Security update for calamares ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2655-1 Rating: moderate References: #1140256 #1152377 Cross-References: CVE-2019-13178 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for calamares fixes the following issues: - Launch with "pkexec calamares" in openSUSE Tumbleweed, but launch with "xdg-su -c calamares" in openSUSE Leap 15. Update to Calamares 3.2.15: - "displaymanager" module now treats "sysconfig" as a regular entry in the "displaymanagers" list, and the "sysconfigSetup" key is used as a shorthand to force only that entry in the list. - "machineid" module has been re-written in C++ and extended with a new configuration key to generate urandom pool data. - "unpackfs" now supports a special "sourcefs" value of file for copying single files (optionally with renaming) or directory trees to the target system. - "unpackfs" now support an "exclude" and "excludeFile" setting for excluding particular files or patters from unpacking. Update to Calamares 3.2.14: - "locale" module no longer recognizes the legacy GeoIP configuration. This has been deprecated since Calamares 3.2.8 and is now removed. - "packagechooser" module can now be custom-labeled in the overall progress (left-hand column). - "displaymanager" module now recognizes KDE Plasma 5.17. - "displaymanager" module now can handle Wayland sessions and can detect sessions from their .desktop files. - "unpackfs" now has special handling for sourcefs setting “file”. Update to Calamares 3.2.13. More about upstream changes: https://calamares.io/calamares-3.2.13-is-out/ and https://calamares.io/calamares-3.2.12-is-out/ Update to Calamares 3.2.11: - Fix race condition in modules/luksbootkeyfile/main.py (boo#1140256, CVE-2019-13178) - more about upstream changes in 3.2 versions can be found in https://calamares.io/ and https://github.com/calamares/calamares/releases This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2655=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): calamares-3.2.15-bp151.4.3.1 calamares-webview-3.2.15-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): calamares-branding-upstream-3.2.15-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-13178.html https://bugzilla.suse.com/1140256 https://bugzilla.suse.com/1152377 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2645-1: important: Security update for haproxy
by opensuse-security＠opensuse.org 04 Dec '19

04 Dec '19

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2645-1 Rating: important References: #1082318 #1154980 #1157712 #1157714 Cross-References: CVE-2019-18277 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for haproxy to version 2.0.10 fixes the following issues: HAProxy was updated to 2.0.10 Security issues fixed: - CVE-2019-18277: Fixed a potential HTTP smuggling in messages with transfer-encoding header missing the "chunked" (bsc#1154980). - Fixed an improper handling of headers which could have led to injecting LFs in H2-to-H1 transfers creating new attack space (bsc#1157712) - Fixed an issue where HEADER frames in idle streams are not rejected and thus trying to decode them HAPrpxy crashes (bsc#1157714). Other issue addressed: - Macro change in the spec file (bsc#1082318) More information regarding the release at: http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95d aae20954b3053ce87e This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2645=1 Package List: - openSUSE Leap 15.1 (x86_64): haproxy-2.0.10+git0.ac198b92-lp151.2.6.1 haproxy-debuginfo-2.0.10+git0.ac198b92-lp151.2.6.1 haproxy-debugsource-2.0.10+git0.ac198b92-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-18277.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1154980 https://bugzilla.suse.com/1157712 https://bugzilla.suse.com/1157714 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2633-1: moderate: Security update for cloud-init
by opensuse-security＠opensuse.org 04 Dec '19

04 Dec '19

openSUSE Security Update: Security update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2633-1 Rating: moderate References: #1099358 #1129124 #1136440 #1142988 #1144363 #1151488 #1154092 Cross-References: CVE-2019-0816 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for cloud-init to version 19.2 fixes the following issues: Security issue fixed: - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorized_keys (bsc#1129124). Non-security issues fixed: - Short circuit the conditional for identifying the sysconfig renderer (bsc#1154092, bsc#1142988). - If /etc/resolv.conf is a symlink, break it. This will avoid netconfig from clobbering the changes cloud-init applied (bsc#1151488). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2633=1 Package List: - openSUSE Leap 15.1 (x86_64): cloud-init-19.2-lp151.2.9.1 cloud-init-config-suse-19.2-lp151.2.9.1 cloud-init-doc-19.2-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-0816.html https://bugzilla.suse.com/1099358 https://bugzilla.suse.com/1129124 https://bugzilla.suse.com/1136440 https://bugzilla.suse.com/1142988 https://bugzilla.suse.com/1144363 https://bugzilla.suse.com/1151488 https://bugzilla.suse.com/1154092 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2628-1: moderate: Security update for calamares
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for calamares ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2628-1 Rating: moderate References: #1140256 #1152377 Cross-References: CVE-2019-13178 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for calamares fixes the following issues: - Launch with "pkexec calamares" in openSUSE Tumbleweed, but launch with "xdg-su -c calamares" in openSUSE Leap 15. Update to Calamares 3.2.15: - "displaymanager" module now treats "sysconfig" as a regular entry in the "displaymanagers" list, and the "sysconfigSetup" key is used as a shorthand to force only that entry in the list. - "machineid" module has been re-written in C++ and extended with a new configuration key to generate urandom pool data. - "unpackfs" now supports a special "sourcefs" value of file for copying single files (optionally with renaming) or directory trees to the target system. - "unpackfs" now support an "exclude" and "excludeFile" setting for excluding particular files or patters from unpacking. Update to Calamares 3.2.14: - "locale" module no longer recognizes the legacy GeoIP configuration. This has been deprecated since Calamares 3.2.8 and is now removed. - "packagechooser" module can now be custom-labeled in the overall progress (left-hand column). - "displaymanager" module now recognizes KDE Plasma 5.17. - "displaymanager" module now can handle Wayland sessions and can detect sessions from their .desktop files. - "unpackfs" now has special handling for sourcefs setting “file”. Update to Calamares 3.2.13. More about upstream changes: https://calamares.io/calamares-3.2.13-is-out/ and https://calamares.io/calamares-3.2.12-is-out/ Update to Calamares 3.2.11: - Fix race condition in modules/luksbootkeyfile/main.py (boo#1140256, CVE-2019-13178) - more about upstream changes in 3.2 versions can be found in https://calamares.io/ and https://github.com/calamares/calamares/releases Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2628=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2628=1 Package List: - openSUSE Leap 15.1 (x86_64): calamares-3.2.15-lp151.4.3.3 calamares-debuginfo-3.2.15-lp151.4.3.3 calamares-debugsource-3.2.15-lp151.4.3.3 calamares-webview-3.2.15-lp151.4.3.3 calamares-webview-debuginfo-3.2.15-lp151.4.3.3 - openSUSE Leap 15.1 (noarch): calamares-branding-upstream-3.2.15-lp151.4.3.3 - openSUSE Leap 15.0 (x86_64): calamares-3.2.15-lp150.7.2 calamares-debuginfo-3.2.15-lp150.7.2 calamares-debugsource-3.2.15-lp150.7.2 calamares-webview-3.2.15-lp150.7.2 calamares-webview-debuginfo-3.2.15-lp150.7.2 - openSUSE Leap 15.0 (noarch): calamares-branding-upstream-3.2.15-lp150.7.2 References: https://www.suse.com/security/cve/CVE-2019-13178.html https://bugzilla.suse.com/1140256 https://bugzilla.suse.com/1152377 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2626-1: important: Security update for haproxy
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2626-1 Rating: important References: #1082318 #1154980 #1157712 #1157714 Cross-References: CVE-2019-18277 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for haproxy to version 2.0.10 fixes the following issues: HAProxy was updated to 2.0.10 Security issues fixed: - CVE-2019-18277: Fixed a potential HTTP smuggling in messages with transfer-encoding header missing the "chunked" (bsc#1154980). - Fixed an improper handling of headers which could have led to injecting LFs in H2-to-H1 transfers creating new attack space (bsc#1157712) - Fixed an issue where HEADER frames in idle streams are not rejected and thus trying to decode them HAPrpxy crashes (bsc#1157714). Other issue addressed: - Macro change in the spec file (bsc#1082318) More information regarding the release at: http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95d aae20954b3053ce87e This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2626=1 Package List: - openSUSE Leap 15.0 (x86_64): haproxy-2.0.10+git0.ac198b92-lp150.2.16.1 haproxy-debuginfo-2.0.10+git0.ac198b92-lp150.2.16.1 haproxy-debugsource-2.0.10+git0.ac198b92-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2019-18277.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1154980 https://bugzilla.suse.com/1157712 https://bugzilla.suse.com/1157714 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2632-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2632-1 Rating: moderate References: #1120653 #1120654 #1124341 #1124342 #1155079 Cross-References: CVE-2018-1000877 CVE-2018-1000878 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-18408 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libarchive fixes the following issues: Security issues fixed: - CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653). - CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654). - CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341). - CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342). - CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2632=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bsdtar-3.3.2-lp151.5.3.1 bsdtar-debuginfo-3.3.2-lp151.5.3.1 libarchive-debugsource-3.3.2-lp151.5.3.1 libarchive-devel-3.3.2-lp151.5.3.1 libarchive13-3.3.2-lp151.5.3.1 libarchive13-debuginfo-3.3.2-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libarchive13-32bit-3.3.2-lp151.5.3.1 libarchive13-32bit-debuginfo-3.3.2-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000877.html https://www.suse.com/security/cve/CVE-2018-1000878.html https://www.suse.com/security/cve/CVE-2019-1000019.html https://www.suse.com/security/cve/CVE-2019-1000020.html https://www.suse.com/security/cve/CVE-2019-18408.html https://bugzilla.suse.com/1120653 https://bugzilla.suse.com/1120654 https://bugzilla.suse.com/1124341 https://bugzilla.suse.com/1124342 https://bugzilla.suse.com/1155079 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2631-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2631-1 Rating: important References: #1157004 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for ucode-intel fixes the following issues: - Updated to 20191115 security release (bsc#1157004) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2631=1 Package List: - openSUSE Leap 15.1 (x86_64): ucode-intel-20191115-lp151.2.15.1 References: https://bugzilla.suse.com/1157004 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2019:2629-1: Security update for libxml2
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2629-1 Rating: low References: #1123919 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libxml2 doesn't fix any additional security issues, but correct its rpm changelog to reflect all CVEs that have been fixed over the past. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2629=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libxml2-2-2.9.7-lp150.2.14.1 libxml2-2-debuginfo-2.9.7-lp150.2.14.1 libxml2-debugsource-2.9.7-lp150.2.14.1 libxml2-devel-2.9.7-lp150.2.14.1 libxml2-tools-2.9.7-lp150.2.14.1 libxml2-tools-debuginfo-2.9.7-lp150.2.14.1 - openSUSE Leap 15.0 (noarch): libxml2-doc-2.9.7-lp150.2.14.1 - openSUSE Leap 15.0 (x86_64): libxml2-2-32bit-2.9.7-lp150.2.14.1 libxml2-2-32bit-debuginfo-2.9.7-lp150.2.14.1 libxml2-devel-32bit-2.9.7-lp150.2.14.1 References: https://bugzilla.suse.com/1123919 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0